Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa
File: TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa (raw, json)
Hash identifier: 8mBNptqqkoQDRl+nRsgkuUpQ2+2zqItOCkXjSgxGuWw=
Subject key identifier: 4E:46:52:9F:BA:50:4A:63:C7:63:F2:A7:7F:2F:28:79:3D:CF:67:3D
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0FA8
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa
Signing time: Wed 17 Apr 2024 07:38:12 +0000
ROA not before: Wed 17 Apr 2024 07:38:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.32.0/21 maxlen: 24
180.223.48.0/21 maxlen: 24
180.223.56.0/21 maxlen: 24
180.223.152.0/21 maxlen: 24
180.223.192.0/21 maxlen: 24
180.223.200.0/21 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
180.223.232.0/21 maxlen: 24
180.223.240.0/21 maxlen: 24
180.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4008 (0xfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Apr 17 07:38:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4E46529FBA504A63C763F2A77F2F28793DCF673D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:f6:2a:16:36:61:45:b1:54:1a:49:fe:b7:
08:4d:63:bf:9d:01:ab:7d:7d:82:fe:9c:0e:ba:be:
97:0a:28:02:c0:3f:96:3e:72:d0:13:e1:c7:ab:81:
c5:3e:87:d4:2f:75:48:8e:58:db:28:4e:24:00:b4:
48:e7:ad:53:51:88:f7:48:62:e7:c5:b1:a1:14:51:
06:a4:b8:bc:65:23:a6:d2:cd:00:f5:4b:7d:ef:3f:
b0:c9:a2:9b:f1:32:b6:28:6a:7c:0c:c1:5b:7d:91:
dc:7e:aa:4c:3a:8b:b6:3d:31:84:1e:26:20:11:f0:
f7:68:c5:a0:41:15:18:e8:14:a5:53:4f:8b:e9:7a:
04:98:34:72:5b:d3:02:6a:c5:62:6f:59:e3:95:11:
72:9b:e1:bb:1a:ab:d9:da:31:99:8a:d5:89:0c:23:
d2:29:cf:14:a5:b8:3f:f9:a7:e0:c3:10:be:e1:27:
26:e0:9d:b5:be:74:df:cf:80:6c:e5:bc:1e:28:70:
4b:4b:73:df:74:a4:a0:ad:0d:a1:a9:94:d6:da:4b:
0a:4f:0b:c3:2e:01:60:28:be:dd:29:7d:9c:94:50:
10:15:b7:6f:76:45:59:e8:fb:16:b7:b2:67:f7:8f:
2c:b6:40:f9:8e:c4:d7:1d:0f:48:45:b4:f0:9e:78:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:52:9F:BA:50:4A:63:C7:63:F2:A7:7F:2F:28:79:3D:CF:67:3D
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TkZSn7pQSmPHY_Knfy8oeT3PZz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.32.0/21
180.223.48.0/20
180.223.152.0/21
180.223.192.0/19
180.223.232.0-180.223.255.255
Signature Algorithm: sha256WithRSAEncryption
ad:ed:62:6f:13:b3:0f:59:8c:d8:c4:04:9c:94:61:5a:6d:b8:
4d:b0:16:45:7a:54:2e:8a:92:b8:ae:ab:f9:4c:13:f1:17:8b:
b1:87:f0:be:24:5c:a1:dc:42:44:0b:1f:f8:a7:23:2b:cd:b8:
82:b9:c5:6b:6d:0f:14:6a:5e:51:f5:d1:86:63:53:16:b5:9c:
52:9c:fd:d7:25:f6:74:85:79:cc:2a:c7:5b:8f:54:37:bd:ca:
e0:8a:5d:e6:c2:5f:25:2f:e0:55:d0:d5:5b:95:e9:79:6e:80:
3d:a1:55:66:1d:2f:e8:d7:cb:b8:ea:20:bc:b2:76:3c:30:c7:
61:df:50:97:12:2c:4b:47:54:6b:12:06:06:1e:6f:3b:d5:71:
df:a7:31:58:f1:31:df:28:94:1f:28:43:e4:29:5a:0d:cc:aa:
66:93:09:41:61:be:27:03:ec:29:77:07:0e:1c:38:41:d8:0a:
c7:d8:73:65:bf:0e:21:1a:8a:6f:9d:e7:4c:b0:3c:21:cc:2c:
6b:e1:79:0e:65:98:37:47:d8:cc:cf:c4:37:94:3f:5d:6c:d5:
26:5e:fb:01:d3:7f:6d:80:f8:b6:07:ca:fc:d2:18:f3:5f:40:
f3:93:a5:ee:85:4f:ad:53:70:b9:cf:37:49:12:da:f2:d1:ac:
ca:f3:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org